Infostealer Threat Group “Marko Polo” Evolving Into an “Empire”
New research by Recorded Future provides insight into how advanced and sophisticated the threat group Marko Polo has become since launching in 2022.
Marko Polo is of particular interest due to their rapid progress in advancing their operations. The analysis – covered in a Recorded Futures article – describes the group “impressive” and “alarming,” and even refers to their operations as an “empire.” Mostly targeting cryptocurrency influencers and online gaming personalities, this group has raked in millions using infostealers including HijackLoader, Stealc, Rhadamanthys and AMOS.
This group, which only appears to be in operation since 2022, has grown to tout the following:
- Over 50 unique malware payloads
- Currently uses 30 distinctly unique scams
- Use of spearphishing and social engineering to target specific high-value individuals
- Cross-platform malware covering both Windows and MacOS
- A global reach, targeting individuals worldwide
Recorded Future says organizations should take precautions that include endpoint protection, web filtering, network segmentation, incident response plans, and security awareness training.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Free BreachSim Tool
How easy is it for bad actors to penetrate your system and exfiltrate your data? Pinpoint vulnerabilities, take action and build stronger cyber defenses with KnowBe4’s Breach Simulator “BreachSim.” Based on techniques outlined in the MITRE Att&CK framework, BreachSim launches 12+ simulated scenarios to uncover the stark reality of what happens when employees unknowingly fall for an attack.
How BreachSim works:
- 100% harmless simulation of real breach and data exfiltration attacks
- Provides secure .txt, .doc, and .bmp test files for the simulation
- Tests 12+ realistic data exfiltration scenarios following the MITRE Att&CK framework
- Just download the installer, upload the secure test files, and run
Results in a few minutes!
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/breached-password-test-partner?partnerid=001a000001lWEoJAAW